Orchard Core 1.0.0 Beta1-3383
Approved changes feed: RSS · Atom
cpe:2.3:a:orchardcore:orchard_core:1.0.0:beta1-3383:*:*:*:*:*:*
part: a version: 1.0.0 update: beta1-3383
| Vendor | Orchardcore (bd3125a7-07ca-54bd-827f-7c5cd620155b) |
|---|---|
| Product | Orchard Core (cd5db58f-6e4b-51c2-abd6-7642b580dbb3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/orchardcms/orchardcore |
purl2cpe | 2026-06-01 10:11:27.374193 |
pkg:nuget/OrchardCore |
purl2cpe | 2026-06-01 10:11:27.374194 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-25966 |
vulnerable | 2026-06-08 05:30:41.793682 |
Orchard Core CMS - Improper Session Termination after Password Change
HIGH (8.8)
In “Orchard core CMS” application, versions 1.0.0-beta1-3383 to 1.0.0 are vulnerable to an improper session termination after password change. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.
Published: 2021-10-10T09:45:11.697Z
Updated: 2025-04-30T16:24:51.258Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.